Apple Updates include HTTP access to a Configuration server to retrieve current software patches, configurations, initialization data.

This SonicWALL signature identifies Apple Update traffic